Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.
Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.
The importance of secure and high-rate information transmission cannot be understated in today's society. Unfortunately, a security crisis is impending due to the development of quantum computing technologies which can break current encryption schemes. A promising solution is quantum key distribution (QKD), which offers information-theoretic security. However, practical implementations of QKD do not conform to the idealized security assumptions that are made in QKD security proofs and therefore form security loopholes. The discovery of the measurement-device-independent QKD (MDI QKD) protocol presented a rapid leap in QKD research, as it effectively closes all side channels at the detection end of QKD setups, while maintaining experimental feasibility. Naturally, a major remaining obstacle in QKD research is the vulnerability of practical sources. As the clock rate of QKD systems advances into the GHz range, specific imperfections at the source arise. The goal of this PhD thesis is to conduct characterizations of source imperfections (especially those arising from GHz modulation), quantify their impact on security, and find methods to mitigate them. Specifically, this thesis presents the following studies. A) Identification and analysis of a novel side channel in sources using a Faraday mirror for temperature-stabilized polarization modulation, leading to time-dependent passive leakage of quantum states. We demonstrate that precise side-channel characterization (rather than the pessimistic approximations commonly used in the literature) can improve the estimated secret key rate by multiple orders of magnitude. B) Identification and analysis of a new class of source side channels (hidden multidimensional modulation side channels), using high-speed time-varying encoding as an illustrative case example (which we characterize using experimental and simulation-based methods). We demonstrate that hidden degrees of freedom, such as time, may be coupled to the encoding process, enabling unambiguous state discrimination attacks. In our illustrative case example, this causes the maximum secure transmission distance to be reduced by over 50%. C) Experimental and simulation-based characterization of phase correlations at GHz repetition rates when using electro-optic phase modulation for phase/polarization encoding. Our findings indicate that pattern-dependent phase deviations are on the order of 0.01pi. D) Design and experimental demonstration of a path-selection modulation source -- a source using no active phase modulation components (to mitigate the side channels arising from such components). Phase randomization is achieved through gain-switching and polarization encoding is achieved by randomly selecting between multiple paths, each path corresponding to one of the desired encoded states. Overall, by identifying and characterizing multiple source side channels, this thesis underscores the importance of avoiding unwarranted assumptions regarding the security of QKD sources. Hidden imperfections can introduce significant security vulnerabilities, and these must be continually identified and analyzed. Furthermore, this thesis highlights the value of advancing key rate analysis techniques that can accommodate a broad range of implementation flaws while producing tight security bounds, thereby enabling precise characterization of the information leakage arising from such imperfections. Finally, this thesis emphasizes that active modulators, in general, constitute a major source of potential side channels, highlighting the importance of exploring modulator-free sources. The path-selection modulation scheme presented here provides a practically feasible example of such a source.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Quantum key distribution (QKD) is secure in principle, but practical security can be undermined by discrepancies between real devices and the idealized models assumed in security proofs. Source side channels, including those exploited by Trojan-horse attacks, are particularly detrimental: neglecting them compromises implementation security, whereas accounting for them reduces performance. Here we propose a QKD source that is intrinsically robust against side-channel attacks. Unlike existing passive and modulator-free schemes, it requires neither post-selection of the emitted pulses nor devices with a perfect extinction ratio to suppress side channels, and it does not introduce correlations between the intensity and the encoded bit or basis. Consequently, under idealized source assumptions commonly adopted in proposals for existing schemes, conventional decoy-state security analyses apply directly, yielding substantially higher key rates. Our proposal appears to be within reach of current technology and therefore provides a clear and practical path toward implementation-secure QKD.
Quantum Key Distribution (QKD) is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as quantum computing evolves. In this review, we critically dissect and synthesize the latest advancements in QKD protocols and their security vulnerabilities, with a strong emphasis on rigorous security proofs. We actively categorize contemporary QKD schemes into three key classes: uncertainty principle-based protocols (e.g., BB84), hybrid architectures that enable secure direct communication (eg, three-stage protocol), and continuous-variable frameworks. We further include two modern classes of QKD protocols, namely Twin-field QKD and Device-Independent QKD, both of which were developed to have practical implementations over the last decade. Moreover, we highlight important experimental breakthroughs and innovative mitigation strategies, including the deployment of advanced Quantum Error Correction Codes (QECCs), that significantly enhance channel fidelity and system robustness. By mapping the current landscape, from sophisticated quantum attacks to state-of-the-art error correction methods, this review fills an important gap in the literature. To bring everything together, the relevance of this review concerning quantum augmented networks (QuANets) is also presented. This allows the readers to gain a comprehensive understanding of the security promises of quantum key distribution from theoretical proofs to experimental validations.
Quantum key distribution (QKD) promises information-theoretic security based on quantum mechanics and idealized device models. Practical implementations, however, deviate from these models due to unavoidable device imperfections, and existing security proofs fall short of capturing the complexity of real-world systems. Here we introduce a versatile numerical finite-key security framework valid against general coherent attacks and applicable to a broad class of practical QKD setups. It accommodates most relevant imperfections at both transmitter and receiver, including non-independent-and-identically-distributed (non-IID) signals arising in high-speed QKD systems due to the limited bandwidth of optical modulators, while requiring only partial characterization of the apparatuses. We demonstrate the power of our framework by proving the security of a realistic decoy-state QKD implementation with laser sources, providing a practical route towards rigorous security certification of real-world QKD setups.
Quantum key distribution (QKD) is a method that enables two parties separated by distance to share a secret data string. QKD is based on the principles of quantum mechanics and offers information-theoretical security, making it a strong contender for the next generation of cryptography. However, the use of imperfect devices can lead to vulnerabilities and potential quantum hacking schemes. It is crucial to address these imperfections and restore the security of QKD, especially for individuals who use realistic devices for secure communication. QKD can be categorized into two types based on key encoding methods: discrete-variable (DV) QKD and continuous-variable (CV) QKD. It can also be classified based on the transmission medium: fiber-based QKD, free-space-based QKD, and chip-based QKD. This thesis focuses on chip-based DVQKD and fiber-based CVQKD. In the first part, we study the chip-based DVQKD system in the presence of phase-and polarization-dependent loss. We develop innovative methods to restore the security and improve the key rate. The solution is practical, requiring no hardware modifications, and has been adopted by other groups. The second part focuses on fiber-based CVQKD systems that use intensity fluctuating sources. We establish the security by incorporating the concept from DVQKD. Our proposed techniques are practical and do not require any hardware adjustments for existing CVQKD systems. Lastly, we present a general framework for passive CVQKD. Our proposed passive protocol offers a one-time solution to eliminate all potential side channels or imperfections in the source. Interestingly, we discover that the passive source is an excellent choice for the discrete-modulated CVQKD protocol, since the passive protocol offers the same key rate as its active counterpart, while removing all modulator side channels that have plagued the active ones. To sum up, this thesis introduces novel techniques and practical solutions to address imperfections in source devices in different QKD systems. We also propose a passive protocol that can handle all loopholes in source devices in a one-time process. We anticipate that this thesis will facilitate significant advancements in chip-based and fiber-based QKD implementations in the future.